apache struts2 cookie OGNL command execution

Strike ID:
E12-o9o01
CVSS:
9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)
False Positive:
f
Variants:
6
Year:
2012

Description

This strike exploits a command execution vulnerability in Apache struts2. This vulnerability is due to no input check the cookie names. Remote attackers may do arbitrary code execution on the target system.

CVE